Application Security Analyst I - Secure SDLC Innovator

Talanto; Northern (KY); Hybrid; USD 75,000 - 83,000; Full time

Benefits offered by this job

Medical and dental coverage

Life insurance

Paid holidays and vacations

401K with company match

Job summary

TNS is seeking a Senior Application Security Engineer to advance its secure software development program by integrating security throughout the software development lifecycle (SDLC). This role partners closely with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

Responsibilities include leading SAST, SCA, ASPM, CI/CD security integrations, container security

Qualifications

• Minimum 5+ years in Application Security or Secure Development.
• Experience with SAST, SCA, DAST, ASPM, container security, and CI/CD controls.
• Hands-on experience with GitLab, GitHub, Azure DevOps, or similar.
• Knowledge of OWASP Top 10, threat modeling, secure SDLC, and vulnerability management.

Responsibilities

• Lead application security assessments and vulnerability management.
• Implement and manage SAST, SCA, container, and CI/CD security controls.
• Drive ASPM platform adoption and security tool integrations.
• Partner with development teams to remediate findings and improve secure coding.
• Develop and maintain AppSec automation, workflows, and runbooks.
• Support threat modeling, architecture reviews, and secure design consultations.
• Prioritize remediation for critical/high-risk vulnerabilities.
• Provide guidance across business units and technology teams.

Skills

Application Security

Secure SDLC

Threat Modeling

Vulnerability Management

Security Automation

Remediation

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

GitLab

GitHub

Azure DevOps

Job description

TNS is seeking a Senior Application Security Engineer to advance its secure software development program by integrating security throughout the software development lifecycle (SDLC). This role partners closely with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.

Responsibilities include leading SAST, SCA, ASPM, CI/CD security integrations, container security